Can non-private channels transmit quantum information? 
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We study the power of quantum channels with little or no capacity for private communication. 
Because privacy is a necessary condition for quantum communication, one might expect that such 
channels would be of little use for transmitting quantum states. Nevertheless, we find strong evidence 
that there are pairs of such channels that, when used together, can transmit far more quantum 
information than the sum of their individual private capacities. Because quantum transmissions 
are necessarily private, this would imply a large violation of additivity for the private capacity. 
Specifically, we present channels which display either (1) A large joint quantum capacity but very 
small individual private capacities or (2) a severe violation of additivity for the Holevo information. 



Shannon's information theory, which mathematically 
formalizes the problem of communication in the presence 
of noise, underlies the reliability of all modern commu- 
nications technologies pQ. The cornerstone of Shannon's 
theory is his capacity formula, which gives an elegant ex- 
pression quantifying the capability of a communication 
channel for noiseless transmission. Capacities quantify 
the ultimate limits on communication with a physical 
channel, and provide essential insight for the design of 
practical error correction and mitigation schemes [2J. 

The starting point of information theory is to model 
the noise in a communication link probabilistically. In 
many physical systems this is a reasonable approxima- 
tion, as evidenced by the engineering success of the the- 
ory. However, the physical systems underlying all com- 
munication are fundamentally quantum mechanical and 
when quantum effects become prominent, classical proba- 
bilistic modeling will provide a poor approximation. One 
of the first quantitative investigations of this was the 
work of Holevo 3 , who gave an upper bound on the 
capacity of a noisy quantum channel for classical com- 
munication. 

In these early investigations, quantum effects were gen- 
erally considered to be a nuisance — quantum mechanics 
was a fundamental source of noise that had to be dealt 
with to enable faithful communication. In contrast, in 
1984 Bennett and Brassard suggested [4] that quantum 
effects might be useful for carrying out communication 
and cryptographic tasks that are impossible in a classical 
theory. Specifically, they proposed a quantum method 
for unconditionally secure key distribution and classical 
communication. These ideas spawned a broad array of 
work on both the theory and experiment of quantum key 
distribution, and there are many groups worldwide work- 
ing on practical implementations. Indeed, quantum key 
distribution is, and probably will remain for some time, 
the only practical quantum information based technol- 
ogy- 
Much as the classical capacity of a channel character- 
izes its capability for noiseless classical communication, 
the private capacity of a quantum channel tells us about 



a channel's capability for communication that is secret 
from an eavesdropper. More formally, the classical ca- 
pacity of a quantum channel M is denoted by C (Af) , and 
is defined as the maximal number of bits per channel use 
that can be sent with transmission errors vanishing in the 
asymptotic limit. The private capacity has the additional 
constraint that an eavesdropper with access to the envi- 
ronments of the channels used |18j can learn arbitrarily 
little about the key. 

Unfortunately, unlike the classical capacity of a classi- 
cal channel, no simple characterization is known for ei- 
ther the classical or private capacity of a quantum chan- 
nel. For example, the classical capacity of a quantum 
channel is known j5j |6] to satisfy 

C(JV) = lim -x(A^"), (1) 
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where the Holevo information is defined as 

v(A0=maxv(A^) (2) 

with 

X (M,£) = S (j^PiMiPi)] - £>W/*)) (3) 

for £ an ensemble {pi,Pi} of probabilities pi and quan- 
tum states pi and S(p) = — Trplogp is the von Neu- 
mann entropy. For some special channels it is known that 
C(Af) — x(N) — in other words, the limit is unnecessary. 
It has, however, recently been reported that there exist 
channels for which this is not true [7J, though the viola- 
tion is extremely small. Similarly, the private capacity 
satisfies 

V{M) = lim -V (1 \N® n ), (4) 

n — t-oo fi 

where the private information is defined as 

7>M(A0 = max (x{N,£) - x(#,£)) (5) 

where the complementary channel Af is defined below 
[18]. In this case, it is known that the limit in Eq. Q 
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cannot be removed in general [5], even for some very 
natural qubit channels. 

These difficulties in evaluating capacities are closely re- 
lated to the family of problems known as additivity prob- 
lems. A real function, /, on the set of quantum channels 
is said to be additive if f {M®M) = f(Af)+f(M). Deter- 
mining whether a given function is additive is a problem 
that arises constantly in quantum information science in 
a variety of very natural settings [9]. For example, if it 
were possible to show that x is additive, we would im- 
mediately be able to conclude that C(J\f) = x(N). Sim- 
ilarly, the fact that the regularization in Eq. Q cannot 
be removed is a consequence of the fact that V^ x > is not 
additive. In the context of quantum Shannon theory, the 
importance of additivity questions is twofold: first, show- 
ing additivity of some entropic quantity may often lead to 
a simple capacity formula; and second, when a capacity 
is additive it uniquely specifies the channel's communica- 
tion capabilities independent of what other channels may 
be available. 

The quantum capacity of a channel is the maximal 
rate, in qubits per channel use, at which a sender can 
reliably transmit quantum information in the asymptotic 
limit. The essential feature of the quantum capacity is 
that transmission must be reliable not only on a set of 
orthogonal states, but also on arbitrary superpositions. 
The quantum capacity of a channel N is denoted Q{N). 

It was recently shown that the capacity of a quan- 
tum channel for quantum communication is not additive 
[TO] . In fact, the quantum capacity is very strongly non- 
additive: there are pairs of quantum channels Af and 
A, both with a quantum capacity of zero, that never- 
theless can be combined to achieve a positive capacity: 
Q(N) = Q{A) = but Q(N ® A) > 0, where Q is the 
quantum capacity. This superactivation is not yet com- 
pletely understood, but from [10] it seemed to be related 
to the existence of channels, termed "private Horodecki 
channels" , with zero quantum capacity but positive pri- 
vate capacity [UJH2]- Indeed, at the heart of [TU] is an 
argument showing there is an A with Q{A) — such 
that if Af has Q{N) = but V(N) > the joint capac- 
ity Q(N ® A) > (1/2)V(N). One interpretation of this 
effect is that, while neither Af nor A is capable of trans- 
mitting noiseless quantum information, the two chan- 
nels have complementary capabilities for communication 
which can be combined for sending quantum information. 
Naturally, one would expect A/"'s capability is somehow 
related to it's private capacity. 

In this work we connect the additivity questions for the 
Holevo information and the private capacity by showing 
that either one or the other is highly nonadditive. Specif- 
ically, we show that for every e > there is a family 
of channels lZ d with increasing input dimension d and a 
channel A with V(A) = such that either (1) V(TZ d <S)A) 
is O(logd) larger than V(TZ d ) or (2) C{Tl d ) is Oilogd) 
larger than %(7?.^). Assuming the additivity of x f° r this 
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FIG. 1: Retro-correctable channel. A retro-correctable chan- 
nel has two inputs and two outputs. Thin lines contain quan- 
tum data, while thick lines represent classical data. The con- 
trol input is measured in a random basis. The result of this 
measurement is used to select a member from a random set of 
unitaries which is applied to the data input, which is then out- 
putted as the data output. The control output contains the 
choice of the set of random unitaries and the random basis. 



channel, which we regard as more likely, allows us to con- 
clude that V{Tl d ) < e but V{K% ® A) > \ logd. 

Thus, while it was natural to conjecture that "privacy" 
is the feature that the private Horodecki channel con- 
tributes allowing the superactivation effect, our results 
suggest the situation cannot be quite as simple as that. 
Indeed, it appears that two channels with little or no pri- 
vate capacity an be combined to send an arbitrarily large 
amount of private and even quantum data. 

Our main building block in what follows will be the 
retro- or echo-correctable channels of [13] (see FIG. 
[T]). The standard echo-correctable channel lZ d has a 
d-dimensional data input and a corresponding output; 
a control input of dimension c = (K/e 2 )d(log d) 4 [H5] 
with K a constant; and an infinite-dimensional classi- 
cal control output. The channel internally selects a ran- 
dom basis b, for TL C , and a set of c random unitaries 
{U} = Ui...U c on Ti d . The channel measures the control 
input in the basis b, yielding result j G {l...c} and ac- 
cording to that result applies one of the unitaries Ui to 
the data input, which is then emitted as the data output 
B\ . The channel also emits a classical control output B2 
consisting of the random basis b and the set of random 
unitaries {U} = U\...U C . It does not, however, emit the 
measurement result i but keeps it hidden. 

It can be shown [13] that for any e > and sufficiently 
large d that x(T^d) — e - Thus, if C = x such a channel 
has almost no classical capacity and since the classical 
capacity upper bounds V, it too becomes small. 

However, when used in combination with an erasure 
channel A v e which takes a c-dimensional input and with 
probability 1 — p transmits the input to the output per- 
fectly, but with probability p outputs only an erasure flag, 
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FIG. 2: Evaluating joint coherent information when Alice 
feeds half of one maximally entangled state into the data in- 
put of a retro-correctable channel, keeping its purification A, 
and feeds another maximally entangled state into the con- 
trol input and a 50% erasure channel, (a) When the erasure 
channel doesn't erase, Bob receives the purification F of the 
control input, (b) When the erasure channel erases, it is as if 
a maximally mixed state = was fed into the control input. 

then the combination has a great deal of both quantum 
and private capacity: V > Q ~ (1 — p) logd This is most 
striking, of course, when p > 1/2 since it is then that the 
erasure channel has no private or quantum capacity at 
all [H]. 

The way to use the two channels together is shown in 
FIG. [2j Alice prepares a maximally-entangled state of 
d x d-dimensions on Hilbert space AA' and another of 
c x c-dimensions on space FF' . She feeds the A' and F' 
systems into the data and control inputs of lZ d respec- 
tively, and she also puts the F system into the erasure 
channel, whose output we will call B$. 

The coherent information of the resulting bipartite 
state pa-.b 1 b 2 b 3 is a lower bound on Q and T^ fTSl IT7] : 

Iooh = SiBxB^Bi) - S{AB 1 B 3 \B 2 ) . (6) 

Here, since B2 is classical, the conditional entropies are 
given by averages over b 2l the possible values of B 2 : 

S(B 1 B 3 \B 2 ) = fdb 2 S(p% Ba ) 
S(AB 1 B 3 \B 2 )=Jdb 2 S(p b J l BiB3 ) 

where PabiB 3 anc ^ P h B^B 3 are conditional states given b 2 . 
Using the slightly nonstandard expression in Eq. ^ al- 
lows us to avoid any complications due to the fact that 
B2 is infinite dimensional. 

The coherent information is straightforward to calcu- 
late since the erasure channel's flag breaks the quantity 
into the sum of two terms: 

j / 1 „\ Tiiot erased , ^erased C7\ 

In the unerased case, since Bob knows what basis to 
measure in he can measure the F system which he has 
received through the successful use of the erasure channel 
and determine exactly which Ui has occurred. Thus 

jmfi erased =logd (g) 
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FIG. 3: Joint and individual private capacities of TV d and Ae, 
normalized by logd in the d — > oo limit. The solid line is the 
achievable rate using lZ d with A% and the protocol described 
in the text. The dashed line is the capacity of A% alone. The 
dotted line is an upper bound on the capacity of TV d assuming 
additivity of \- 

When the F system is erased, the the conditional entropy 
of the AB\ given B 2 is at most log c = log d+4 log log d+ 
\og(K j e 2 ) , while the conditional entropy of B\ given B 2 
is log d. So, we have 

^erased > _ 4 bg log rf _ log{K / ^) (9) 

and 

/eoh > (l-p)lo gc i-p(41oglogd + log(^/e 2 )), (10) 

which is positive as d — > oo for 

1 -V > 41oglogrf + log(Ar/e 2 ) 
p log d 

A consequence of the above argument is that at least 
one of V and x violates additivity severely. In particu- 
lar, letting p = 1/2, if V(H e d O A e ) - V(H e d ) = o(logd) 
we have V(TZ d ) = O(logd). Since C > V, this implies 
that C(K d ) = 0(log d) while x(^d) ^ e - Otherwise, if 
V{n d O A e ) - V(TZ d ) = O(logd), we have a large vi- 
olation of additivity for V, since then V(A e ) = 0, but 
V{H d ® A e ) > V(TZ e d ). We have plotted the joint and 
individual capacities or lZ d (assuming it has additive x) 
and Al in FIG. |] 

In summary, we have explored violations of additiv- 
ity arising from two channels, lZ d and aV" 2 . lZ d is a 
retro-correctable channel, described in FIG 1, and satis- 

1 /2 

fies x(R-d) — e - -Ae is a 50% quantum erasure channel, 
whose private capacity is zero. Our main result, illus- 
trated in FIG 2, is that these two channels can be used 
together to transmit large amounts of quantum informa- 
tion. This leaves only two possibilities: either (1) lZ d 
has a large classical capacity, which would imply severe 
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nonadditivity of % or (2) a large violation of additivity 
for the private capacity. 

As we have mentioned above, we consider the extreme 
nonadditivity of x for the retro-correctable channel to be 
rather unlikely, and tend to believe instead that it is V 
which is nonadditive. We believe this despite the recent 
results of Hastings [7] since his results are a tiny effect 
for a very specially designed family of channels. It is 
nevertheless an important open problem to find an ar- 
gument that shows nonadditivity of the private capacity 
without additivity assumptions on \- While the p > 1/2 
erasure channels we have used have quantum and private 
capacities exactly equal to zero, we have only been able 
to show that the retro-correctable channels, lZ e d , have 
capacity less than e (even this is conditional on the ad- 
ditivity of x) ■ One would hope for the stronger result of 
pairs of channels with strictly zero private capacity that 
can jointly allow nonzero private capacity. This would be 
parallel to the quantum capacity findings in |10j . In the 
quantum setting, there are two distinct types of zero ca- 
pacity channels — PPT channels and channels whose en- 
vironment can simulate the channel output (sometimes 
called "antidegradable" ) . Unfortunately, the only type 
of channels known to have zero private capacity are the 
antidegradable ones (which include symmetric channels 
as a special case). Because the product of antidegrad- 
able channels is itself antidegradable, and therefore has 
zero private capacity, a necessary step for finding genuine 
superactivation would be identifying a class of channels 
with zero private capacity that are not antidegradable. 
Finding such channels is an intriguing open problem. 

We do know that the classical capacity is often a very 
weak bound on the private capacity (for example, a clas- 
sical channel always has exactly zero private capacity, 
regardless of its classical capacity). It is then plausible 
that the private capacity of lZ d , or if not that 7l d with 
some small additional noise that would leave the joint 
capacity essentially unchanged, may actually be zero. If 
this is so, then the superactivation effect of [TU] requires 
no privacy and we are left to wonder just what it is that 
TZ d provides. 
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